Privacy Notice – Assessio Sweden
This privacy notice aims to inform you about how we at Assessio Sverige AB, as data controller, process your personal data and what rights you have under the General Data Protection Regulation.
In other words, we want to tell you how we protect your personal privacy and thus what we do to ensure that your personal data is processed in an adequate and secure manner.
The General Data Protection Regulation is subject to the abbreviation GDPR from the English General Data Protection Regulation, and we will thus use this abbreviation in communication with you.
Data Controller
The person or business that processes your personal data and has an obligation to comply with GDPR. We at Assessio Sverige AB are thus responsible for the processing of your personal data.
Treatments
As a data controller, we want to inform you about how your personal data is processed. Below you can see what treatments we do and, among other things:
- Why Assessio Sverige AB needs your personal data.
- What legal basis Assessio Sverige AB has for processing your data.
- How long the personal data will be stored before it is deleted.
Recruitment process
We have a recruitment process to meet the needs of the business. We collect your personal data as a job seeker because you have applied for a position with us. We collect your contact details and CV with legal obligation as our legal basis for non-employment and balancing of interests in spontaneous applications.
Supplier register
We have supplier registers to be able to streamline the work regarding accounting and payment of incoming supplier invoices. We collect your contact information with legal notice as our legal basis.
Contract management
We have contract management to be able to streamline the work regarding storage and administration of agreements. We collect your contact information with legal obligation as our legal basis.
Image bank
We have image bank to be able to market Assessio Sverige AB. We collect your contact information as well as images with agreements as our legal basis for specific customer cases and balance of interests for spontaneous images and videos.
CRM
We have a CRM to register our customers’ data for business-related contact. We collect your contact information with agreements as our legal basis.
Entry
We have entry to be able to ensure who moves in Assessio Sweden AB’s premises. We collect your contact details with a balance of interests as our legal basis.
Customer support
We have customer support to be able to provide support and manage communication externally. We collect your contact details as well as candidate test results with agreements as our legal basis for support to our customers and balance of interests for other external support. Personal data is deleted after one year of the received case.
Newsletter
We have newsletters to be able to market and inform. We collect your contact information with consent as our legal basis.
Training notification
We have a training report to be able to provide the right information for the implementation of training. We collect your contact information with agreements as our legal basis.
Education register
We have training registers to be able to prepare our participants for upcoming certification. We collect your contact information with agreements as our legal basis.
Home page
We have a website to have business information available to stakeholders. We collect your contact information as well as image with agreement as our legal basis
Service development
We have service development to be able to develop a more accurate product. We collect your demographic information with consent as our legal basis.
Customer success
We have customer success to increase customer value. We collect your contact information as well as the use of a service with a balance of interests as our legal basis.
Marketing
We have marketing to promote our products and services. We collect your contact details with a balance of interests as our legal basis.
Event registration
We have event registration to be able to prepare for upcoming events. We collect your contact information with agreements as our legal basis.
New customer processing
We have new customer processing to be able to offer our products and services to new customers. We collect your contact details as well as IP address with a balance of interests as our legal basis.
Social media
We have social media to be able to offer our products and services to new customers. We collect your contact information as well as the image with consent as our legal basis.
Training implementation
We have digital training implementation to be able to perform training for our customers remotely. We collect your contact information as well as image with agreement as our legal basis.
Response service
The purpose of the processing is to receive cases and contact details for those who contact us when customer support is not available. We collect your contact details with a balance of interests as our legal basis.
Booking system
The purpose of the processing is to be able to schedule meetings with our final candidates. We collect your contact details with contracts as our legal basis.
Administrator log-in
The purpose of the processing is invoicing, keeping statistics, service delivery and security. We collect your contact details with agreement and balancing of interests as our legal bases. Certification is saved indefinitely with balancing of interests as the legal basis.
Certification
The purpose of the processing is to ensure quality through certification after the execution of our applications. We collect your contact details with balancing of interests as our legal basis. Personal data is deleted when the contract is terminated, if the customer so wishes. Otherwise, personal data is saved in the form of certifications until further notice with balancing of interests as the legal basis.
MBTI – Education
The purpose of the processing is to ensure knowledge for certification in our customers through training. We collect your personal data with balancing of interests as our legal basis.
Chatbot
The purpose of the processing is to make it easier for our customers to get in touch with the company’s various departments, as well as to receive information about new leads and prospects. We collect your personal data with balancin of interest as our legal basis.
Demo – Process
The purpose of the processing is to invite leads and prospects into our platform in order to be able to test and get an overall picture of the use, for sales purposes. We collect your contact details with balancing of interests as our legal basis.
Feedback Collection
We collect feedback to improve our platform and better understand user experience. We collect your rating, feedback message, and user and contextual information to help interpret the feedback. The legal basis for the processing of your personal data is legitimate interest. Your data will be retained for two years after submission and then automatically deleted.
Recipients – Who can access your personal data
Only employees at Assessio Sverige AB who need your data will have access to your personal data. Our data processors who process your personal data according to our instructions. We may disclose your personal data to law enforcement authorities in case of suspicion of a crime. Furthermore, some data is published on our website, this data is available to anyone who visits our website or other digital communication platforms.
Transfer of personal data outside the EU/EEA
We transfer your personal data to the United States (SCC) with agreements, legal obligation, balancing of interests as support and the UK with agreements as support.
By publishing personal data on our website and other communication platforms, these are available worldwide, and thus a transfer can take place to outside the EU/EEA.
Retention period
Recruitment process
Personal data is deleted two years after a advertised service has been filled in accordance with the Discrimination Act.
Supplier register
Personal data is deleted seven years after the calendar year in which the financial year ended in accordance with the Accounting Act.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Picture bank:
Customer case images are deleted after five years, spontaneous environmental images and videos are deleted after two years.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Contract management:
Terminated contracts are deleted seven years after the calendar year in which the financial year ended in accordance with the Accounting Act.
CRM system:
sonal data is deleted five years after the contract is terminated.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Entry
Personal data is deleted one month after terminated supplier services. Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Customer support:
The honors received will be deleted after 5 years.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Newsletter:
Contact lists with newsletter recipients are deleted one year.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Training notification:
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Entry:
Personal data is deleted one month after terminated supplier services.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Customer support:
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Newsletter:
Contact lists with newsletter recipients are deleted one year.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Training notification:
Personal data is deleted after six months, after the education notification has been received. Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Training register:
The account in the Education Register is deleted three months after the account is created.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Home page:
Content on the website is deleted immediately when deletion takes place back office. For more information about how we handle your personal data, follow this link. Cookie policy
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Service development:
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Customer success:
Personal data is deleted one years after inactivity.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Marketing:
Personal data is deleted 180 days after being received via the website.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Event registration:
ersonal data is deleted two years after being received via the website.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
New customer processing:
Personal data will be deleted within one month for leads and prospects who choose to decline Assessio’s offer.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Social media:
When images are posted on LinkedIn, visitors to this website can save published personal data. Such further treatment is beyond Assessio’s control.
Training implementation:
The team training team will be deleted within five years of completed training.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Response service:
Waiting for answers on when they delete our cases. They currently delete customers’ data after two years in the event of a terminated contract.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Booking system:
Personal data will be deleted in ending each project, at least in one year.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Administration log in:
Personal data will be deleted 30 days after terminated agreement.
Certification:
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
MBTI-Education:
Personal data will be deleted 18 months after closing your account.
Chatbot:
Personal data will be deleted in five years.
Your data is currently saved in a system where automatic deletion is not currently possible. We aim to have that functionality in place by March 31, 2025. After that, the data will be deleted after 3 months. In the meantime, we will delete your data manually upon request.
Rights
If we at Assessio Sverige AB process your personal data, you are a data subject and have the following rights:
Right of access
You can request to be notified whether we process personal data relating to you and, if so, receive a copy of these – a so-called register extract – along with certain details.
Right to rectification
If you believe that the personal data relating to you is incorrect or incomplete, you can request to have the data corrected or supplemented.
Right to object
When we process personal data with a general/legitimate interest as a legal basis, you have the right to object to the processing at any time. If we cannot demonstrate that there are compelling, legitimate reasons to continue processing the data, we must cease processing.
Right to restriction of treatment
In some cases, for example, if you have objected to the processing, you have the opportunity to demand restrictions on the processing of your personal data. By requesting a restriction, you have, at least for a certain period of time, the opportunity to stop us from using the data. You can also prevent us from deleting the data, for example if you need the data to claim damages.
Right to erasure
If we process personal data about you in order to fulfil a contract, you have in some cases the opportunity to obtain personal data relating to you to use it elsewhere, such as transferring the data to another data controller.
Consent to the use of cookies.
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner
